Fwd: kerberos V and samba

[Andrew Bartlett]

Anthony Brock wrote:
> 
> No.  This question was never answered.  What I have discovered on my own is:
> 
> If you configure and build the server software with support, then
> 
> 1) smbclient will work, using the krb5 user name and password, assuming the
> user has an local machine account.
> 
> 2) Remote logins from windows do not appear to work.
> 
> I am still very interested in any information on this topic, if
> available.  Especially any how-to or related documents.
> 
> Tony

Kerebos should work if the client sends a plaintext username/password,
it certainly cannot work with encrypted passwords.  (But then, sending
plaintext passwords kind of defeats the purpose of kerebos).

If it doesn't work for plain-text passwords, then that's a bug - and it
will need to be looked into more carefully.  Unfortunately plain-text
passwords are now the exception rather than the rule for samba
users/samba testers, so its not entirely unlikely.

Andrew Bartlett

> 
> >Date: Thu, 19 Apr 2001 15:40:37 -0700
> >Subject: kerberos V and samba
> >To: abrock at georgefox.edu
> >From: "dillera at isc.upenn.edu" <dillera at isc.upenn.edu>
> >
> >
> >Did you ever find out how to enable Samaba to hit a Kerberos V KDC?
> >
> >
> >thanks,
> >
> >andy
> >__________________________
> >Andrew Diller
> >ISC Networking
> >U  P  E  N  N
> 
> ******************************************************************************
> * Anthony Brock                                         abrock at georgefox.edu *
> * Director of Network Services                         George Fox University *
> ******************************************************************************
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett
abartlet at pcug.org.au